Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
File: c5b09886-3e08-3eca-87fa-d4d7727ac383.roa (raw, json)
Hash identifier: Viwes5oQjvc2XcK0o+9FYSVMJCgCpKTNFJ3D87Y75p8=
Subject key identifier: B6:1A:8D:4D:75:FB:D1:C7:00:13:0F:55:95:DB:65:75:6F:DC:01:A9
Certificate issuer: /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial: 010D0C9F4328584800AFC6B2F73EF366D2405100
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 20213
IP address blocks: 134.195.142.0/23 maxlen: 23
134.195.142.0/24 maxlen: 24
134.195.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c6:b2:f7:3e:f3:66:d2:40:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=42aa8347-1e29-40df-bbf7-7414ace02f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:2f:a0:56:19:51:27:83:a5:60:d8:87:37:
f3:d5:16:b9:e0:82:cb:a7:2f:fa:2a:b9:23:57:a7:
52:40:30:d5:3d:c7:6b:c5:3b:87:76:22:ee:58:d3:
04:a3:b6:07:11:ac:15:a0:d7:cd:30:94:0b:9b:be:
e1:85:df:ef:68:5f:e2:7e:dd:0c:fc:22:bf:63:fe:
8a:da:44:9b:09:3b:ec:20:d0:56:bc:4f:e3:52:cf:
99:0b:4e:eb:25:56:f3:84:ad:1a:38:b9:8d:cd:fc:
d2:f6:84:ec:ed:36:44:a7:8a:6d:17:8a:98:45:c2:
81:51:c6:f4:a7:d5:0b:35:40:72:67:b0:62:7e:55:
9f:f9:fc:32:22:17:68:6c:b3:f3:16:44:0d:fe:7e:
f8:96:d3:7a:5c:a4:03:99:6a:87:9e:5a:a8:dd:01:
bf:da:56:de:72:52:2e:b1:40:66:2e:df:c3:f2:19:
ec:f6:d9:59:66:8f:b7:c1:37:23:07:2b:b2:ae:19:
2c:78:36:70:68:4d:44:61:cd:54:54:b6:8c:48:75:
1d:1d:70:f5:fe:37:92:71:09:75:0f:e5:92:3a:33:
8e:78:5e:f5:c9:a1:3a:f7:53:a6:ca:11:58:ad:a6:
1e:7e:ed:1e:b2:31:93:e5:b8:62:a5:ce:e7:dd:5f:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:8D:4D:75:FB:D1:C7:00:13:0F:55:95:DB:65:75:6F:DC:01:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/c5b09886-3e08-3eca-87fa-d4d7727ac383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
X509v3 Authority Key Identifier:
keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c0:d5:4e:a5:b2:c2:4f:c6:03:99:f9:aa:05:34:96:25:06:
11:f0:02:f3:53:a7:ca:3f:7d:b8:2c:34:dc:68:e7:17:0d:9d:
a5:09:1c:35:9d:01:7d:c2:db:55:59:a4:a2:ce:15:88:3f:2a:
6c:8e:58:77:a4:7b:e7:3e:30:a1:94:96:cb:5d:9a:43:94:a5:
8d:45:f1:fe:dc:bc:f8:2d:67:4d:6a:5b:e6:02:38:14:6d:7b:
1e:1e:d1:1a:c5:f7:e1:5c:f5:6e:ef:f7:3b:ab:3b:f3:e3:1f:
8d:18:3d:6e:06:ec:32:72:cf:33:32:46:1a:99:fc:8c:7f:99:
3b:ae:d7:63:d7:b0:9f:22:a6:f9:22:3f:33:2e:39:91:47:a4:
4e:97:a4:68:0f:a8:c1:8d:13:80:2a:2d:b4:a0:28:c0:47:1c:
b5:3e:02:f6:71:d9:72:e2:c1:b8:dd:6c:40:cd:df:60:69:ed:
4d:08:76:ac:5d:3a:63:3e:05:f0:b6:da:11:b4:6f:b4:fb:eb:
76:f1:16:ac:9f:b4:2e:d0:64:2d:82:f4:14:12:65:15:c3:1b:
0e:d3:28:26:d4:44:1a:ca:4a:c2:28:58:af:35:4e:4b:ff:72:
c4:99:79:f5:a8:45:4a:fd:7a:4a:2c:82:68:69:8f:61:7d:e8:
ca:7d:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:03 2025 by rpki-client